CVE Vulnerability Database
Search and browse 423,915 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-92155 | HIGH | 7.5 | 0.4% | Oct 14, 2026 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applicati... |
| CVE-2026-92154 | HIGH | 8.1 | 0.6% | Oct 14, 2026 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applicati... |
| CVE-2026-92152 | CRITICAL | 9.3 | 0.7% | Oct 14, 2026 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applicati... |
| CVE-2026-92150 | HIGH | 7.5 | 0.5% | Oct 14, 2026 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applicati... |
| CVE-2026-88164 | HIGH | 8.8 | 0.7% | Oct 14, 2026 | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-86856 | MEDIUM | 6.5 | 0.2% | Oct 14, 2026 | A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers sized for a single queue pair can be overflowed whe... |
| CVE-2026-86849 | MEDIUM | 6.5 | 0.1% | Oct 14, 2026 | A flaw was found in DPDK lib/vhost vhost-crypto. Integer overflow in chain length checks, and missing length checks on t... |
| CVE-2026-86848 | HIGH | 8.8 | 0.1% | Oct 14, 2026 | A flaw was found in DPDK lib/vhost vhost-crypto. The indirect-descriptor snapshot double-fetches a guest descriptor next... |
| CVE-2026-86847 | MEDIUM | 6.5 | 0.2% | Oct 14, 2026 | A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an uninitialized next pointer when ... |
| CVE-2026-86846 | MEDIUM | 6.5 | 0.2% | Oct 14, 2026 | A flaw was found in DPDK lib/vhost vhost-crypto. A guest can supply an avail-ring descriptor index that is used without ... |
| CVE-2026-86845 | MEDIUM | 6.5 | 0.2% | Oct 14, 2026 | A flaw was found in DPDK lib/vhost vhost-crypto. Session cleanup can leave a stale cached session pointer, and the data ... |
| CVE-2026-86567 | HIGH | 8.8 | 0.2% | Oct 14, 2026 | A flaw was found in DPDK lib/vhost. The VDUSE handler fails to invalidate vring pointers when the IOTLB is invalidated, ... |
| CVE-2026-86566 | MEDIUM | 6.5 | 0.2% | Oct 14, 2026 | A flaw was found in DPDK lib/vhost. A guest with runt RX descriptors can underflow the copy length in vhost enqueue, cau... |
| CVE-2026-86461 | HIGH | 8.8 | 0.7% | Oct 14, 2026 | The FV Flowplayer Video Player plugin for WordPress is vulnerable to Limited Arbitrary File Upload in all versions up to... |
| CVE-2026-79957 | HIGH | 8.1 | 0.3% | Oct 14, 2026 | ServiceNext contains an insecure direct object reference (IDOR) in the /api/Usuario/GetUsuarios endpoint, which accepts ... |
| CVE-2026-77371 | CRITICAL | 9.3 | 0.5% | Oct 14, 2026 | Redash is a package for data visualization and sharing. From 26.0.0 until 26.9.0, the DuckDB query runner's _connect() p... |
| CVE-2026-76083 | MEDIUM | 4.9 | 0.4% | Oct 14, 2026 | Redash is a package for data visualization and sharing. From 10.0.0 until 26.9.0, the JSON data source query runner in r... |
| CVE-2026-55573 | CRITICAL | 9.8 | 0.6% | Oct 14, 2026 | e107 is a content management system (CMS). Prior to 2.3.7, install.php decodes the attacker-controlled previous_steps PO... |
| CVE-2026-55572 | CRITICAL | 10 | 0.5% | Oct 14, 2026 | e107 is a content management system (CMS). Prior to 2.3.7, the bundled alt_auth plugin's otherdb and e107db authenticati... |
| CVE-2026-54554 | HIGH | 7.5 | 0.5% | Oct 14, 2026 | FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.1870, the management... |
| CVE-2026-42093 | HIGH | 8.7 | 0.7% | Oct 14, 2026 | Redash is a package for data visualization and sharing. From versions after 8.0.0 until 26.9.0, the Query Results query ... |
| CVE-2026-110777 | MEDIUM | 5.7 | 0.4% | Oct 14, 2026 | A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH property automatical... |
| CVE-2026-109527 | HIGH | 7.5 | 0.7% | Oct 14, 2026 | The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. In mcp ... |
| CVE-2026-108484 | HIGH | 7.1 | 0.2% | Oct 14, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPManageNinja Best... |
| CVE-2026-108483 | HIGH | 7.1 | 0.2% | Oct 14, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hippooo Hippoo Mob... |